From 82f30a121b48df3389201c8dc2dd838a0769d7ca Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Matej=20Ba=C4=8Do?= <matejbaco2000@gmail.com>
Date: Sun, 7 Sep 2025 20:42:18 +0200
Subject: [PATCH 1/2] upgrade http lib for backwards compatibility default
 param

---
 composer.lock | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/composer.lock b/composer.lock
index 2fd08ed3ef..bd70f229ad 100644
--- a/composer.lock
+++ b/composer.lock
@@ -3942,16 +3942,16 @@
         },
         {
             "name": "utopia-php/framework",
-            "version": "0.33.26",
+            "version": "0.33.27",
             "source": {
                 "type": "git",
                 "url": "https://github.com/utopia-php/http.git",
-                "reference": "5bba671dddc9cb00cb3ef92519ce69aca2ee0d2b"
+                "reference": "d9d10a895e85c8c7675220347cc6109db9d3bd37"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/utopia-php/http/zipball/5bba671dddc9cb00cb3ef92519ce69aca2ee0d2b",
-                "reference": "5bba671dddc9cb00cb3ef92519ce69aca2ee0d2b",
+                "url": "https://api.github.com/repos/utopia-php/http/zipball/d9d10a895e85c8c7675220347cc6109db9d3bd37",
+                "reference": "d9d10a895e85c8c7675220347cc6109db9d3bd37",
                 "shasum": ""
             },
             "require": {
@@ -3983,9 +3983,9 @@
             ],
             "support": {
                 "issues": "https://github.com/utopia-php/http/issues",
-                "source": "https://github.com/utopia-php/http/tree/0.33.26"
+                "source": "https://github.com/utopia-php/http/tree/0.33.27"
             },
-            "time": "2025-09-07T10:11:44+00:00"
+            "time": "2025-09-07T18:40:53+00:00"
         },
         {
             "name": "utopia-php/image",

From a7304df2dfeaa717a1f32c43864a6dfd440a835f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Matej=20Ba=C4=8Do?= <matejbaco2000@gmail.com>
Date: Sun, 7 Sep 2025 20:44:30 +0200
Subject: [PATCH 2/2] set header override properly

---
 app/controllers/general.php | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/app/controllers/general.php b/app/controllers/general.php
index 8280df2769..8abca96742 100644
--- a/app/controllers/general.php
+++ b/app/controllers/general.php
@@ -719,8 +719,11 @@ function router(App $utopia, Database $dbForPlatform, callable $getProjectDB, Sw
             }
 
             if (\is_array($values)) {
+                $count = 0;
                 foreach ($values as $value) {
-                    $response->addHeader($name, $value);
+                    $override = $count === 0;
+                    $response->addHeader($name, $value, override: $override);
+                    $count++;
                 }
             } else {
                 $response->addHeader($name, $values);
@@ -1067,7 +1070,7 @@ App::init()
         }
 
         $response
-            ->addHeader('Server', 'Appwrite', override: true)
+            ->addHeader('Server', 'Appwrite')
             ->addHeader('X-Content-Type-Options', 'nosniff')
             ->addHeader('Access-Control-Allow-Methods', 'GET, POST, PUT, PATCH, DELETE')
             ->addHeader('Access-Control-Allow-Headers', 'Origin, Cookie, Set-Cookie, X-Requested-With, Content-Type, Access-Control-Allow-Origin, Access-Control-Request-Headers, Accept, X-Appwrite-Project, X-Appwrite-Key, X-Appwrite-Dev-Key, X-Appwrite-Locale, X-Appwrite-Mode, X-Appwrite-JWT, X-Appwrite-Response-Format, X-Appwrite-Timeout, X-SDK-Version, X-SDK-Name, X-SDK-Language, X-SDK-Platform, X-SDK-GraphQL, X-Appwrite-ID, X-Appwrite-Timestamp, Content-Range, Range, Cache-Control, Expires, Pragma, X-Forwarded-For, X-Forwarded-User-Agent')
@@ -1138,7 +1141,7 @@ App::options()
         $origin = $request->getOrigin();
 
         $response
-            ->addHeader('Server', 'Appwrite', override: true)
+            ->addHeader('Server', 'Appwrite')
             ->addHeader('Access-Control-Allow-Methods', 'GET, POST, PUT, PATCH, DELETE')
             ->addHeader('Access-Control-Allow-Headers', 'Origin, Cookie, Set-Cookie, X-Requested-With, Content-Type, Access-Control-Allow-Origin, Access-Control-Request-Headers, Accept, X-Appwrite-Project, X-Appwrite-Key, X-Appwrite-Dev-Key, X-Appwrite-Locale, X-Appwrite-Mode, X-Appwrite-JWT, X-Appwrite-Response-Format, X-Appwrite-Timeout, X-SDK-Version, X-SDK-Name, X-SDK-Language, X-SDK-Platform, X-SDK-GraphQL, X-Appwrite-ID, X-Appwrite-Timestamp, Content-Range, Range, Cache-Control, Expires, Pragma, X-Appwrite-Session, X-Fallback-Cookies, X-Forwarded-For, X-Forwarded-User-Agent')
             ->addHeader('Access-Control-Expose-Headers', 'X-Appwrite-Session, X-Fallback-Cookies')